When a user clicks the activation link in the email, it takes them to activate_user.php with a token attached.

However, it looks like the 'else if' on line 63 just echoes a json string if an error occurs (which then gets displayed in the browser).

If setUserActive() is successful, it look like the 'if' on line 82 always returns false and line 85 redirects the user to getReferralPage() (which should only happen if ajaxMode is false - but making it look like everything is working fine).

So, if you took out line 85, the page would just display a json string or nothing, and not redirect the user anywhere.

Am I seeing this right?